CVE-2023-23469

CWE-5253 documents3 sources
Severity
3.3LOW
EPSS
0.1%
top 83.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Cloud PAK FOR Business Automation
Timeline
PublishedFeb 1

Description

IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.5 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/cloud_pak_for_business_automation18.0.0, 18.0.1,18.0.2,19.0.1,19.0.2,19.0.3,20.0.1,20.0.2,20.0.3,21.0.1,21.0.2,21.0.3,22.0.1,22.0.2
▶NVDibm/cloud_pak18.0.0 — 20.0.3+4

🔴Vulnerability Details

2
GHSA
GHSA-hq8f-55fx-pqv7: IBM ICP4A - Automation Decision Services 18↗2023-02-01
▶
CVEList
IBM Cloud Pak for Business Automation information disclosure↗2023-02-01
▶
CVE-2023-23469 (LOW CVSS 3.3) | IBM ICP4A - Automation Decision Ser | cvebase.io